Solution needed to remove GPOs on remote laptops

  • Thread starter Thread starter paulie
  • Start date Start date
P

paulie

I have a GPO set up for my small office with very few defaults
changed. Mainly I am just limiting access to network settings, and the
ability to add/remove connections, as well as creating paths to
network resources.

BUT

When a laptop user travels and is not connected to the network, I
would like to be able to have the GPO settings removed to allow dialup
connections to be created.

Users are already local administrators of their machines, if that
makes a difference.

Is there a simple solution to this?

Could it be as easy as creating a script to remove the GPO and have
the user run it when they want to use their machines on the road?
 
You could try placing all of your laptop (Machines) users into an OU which
gives the permissions to dialup to your network and block inheritance to the
GPO which blocks this setting. Or you could have your laptop users logon
with local accounts that don't exist on the domain and authenticate with
thier domain acounts once they initiate dial up connections. Set the local
policy on the laptop to allow access to the network connections within the
local policy.
 
Back
Top